diff options
| -rw-r--r-- | trivium.rb | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/trivium.rb b/trivium.rb index 3e45eb5..fc5d652 100644 --- a/trivium.rb +++ b/trivium.rb @@ -62,8 +62,8 @@ class Dots < String case name when "link" title, desc = body.split("|", 2) - %{<p class="link"><span><a href="#{args.strip}">#{title.strip}</a>#{ - SpanBlueCloth.new(desc.to_s).to_html}</span></p>} + %{<p class="link"><span><a href="#{CGI.escapeHTML(args.strip)}">#{ + title.strip}</a>#{SpanBlueCloth.new(desc.to_s).to_html}</span></p>} when "quote" if args.strip.empty? src = "" |